$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F1E13650D7B8043C2436680094FF724460A5D4C.cer File: 2F1E13650D7B8043C2436680094FF724460A5D4C.cer (raw, json) Hash identifier: f1y9lJ/3UIl7N05rQ+ItdLcBPt0BHjX4xVofmB+J9c8= Subject key identifier: 2F:1E:13:65:0D:7B:80:43:C2:43:66:80:09:4F:F7:24:46:0A:5D:4C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 12C07CD2A2E7D86A4EFAD0BB6D3B79A67EDFFB04 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/0/2F1E13650D7B8043C2436680094FF724460A5D4C.mft caRepository: rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 20:20:21 +0000 Certificate not after: Tue 21 Apr 2026 20:25:21 +0000 Subordinate resources: AS: 28144 IP: 187.49.112.0/20 IP: 2804:10c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c0:7c:d2:a2:e7:d8:6a:4e:fa:d0:bb:6d:3b:79:a6:7e:df:fb:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 20:20:21 2025 GMT Not After : Apr 21 20:25:21 2026 GMT Subject: CN=2F1E13650D7B8043C2436680094FF724460A5D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:83:f5:21:c1:69:e5:a7:5e:4d:a2:fa:bf:64: d2:c1:b6:83:8f:fe:72:79:fd:2f:17:9b:38:ab:86: a8:b9:69:16:09:7d:2d:41:c2:e7:22:8e:35:4f:76: 52:ff:f6:fd:14:77:74:f6:8a:34:d7:6f:f1:bb:6a: 5c:f1:10:5a:fb:f2:3a:e9:12:20:b4:49:d2:9d:de: 73:82:a6:14:47:10:7c:e7:ed:88:0a:9e:a6:c3:3c: 60:7a:92:43:43:76:0d:d4:8a:55:78:8b:47:09:e9: 97:02:92:9c:63:f1:cb:a9:13:02:a4:db:39:78:ff: 79:49:eb:09:42:a5:1c:f0:d6:73:3f:68:d9:15:ef: 65:4d:aa:95:99:2b:c3:2e:54:a4:8c:2b:6c:e3:79: db:67:1d:2e:e6:b1:51:a2:e2:d0:1c:33:f6:be:19: 71:fd:50:7e:84:9b:e8:2a:d8:ad:c5:2a:f0:b0:69: 58:dc:59:6c:bb:10:33:46:a5:c2:ff:e5:6f:18:36: 80:33:8a:a7:8e:29:f8:18:a9:0d:ab:bd:22:01:01: 93:5b:52:6d:e5:4d:88:5b:e6:2b:10:06:28:ad:d3: 22:dc:bf:52:5d:c3:cb:f0:58:c5:4d:5a:9f:50:3e: 2d:19:f8:a9:cc:f3:f2:fe:a8:32:36:9a:d2:80:a6: a6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:1E:13:65:0D:7B:80:43:C2:43:66:80:09:4F:F7:24:46:0A:5D:4C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/0/2F1E13650D7B8043C2436680094FF724460A5D4C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.49.112.0/20 IPv6: 2804:10c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28144 Signature Algorithm: sha256WithRSAEncryption ca:24:58:b6:ef:cd:f7:cc:9c:35:58:b8:46:89:fd:55:00:bb: 2e:07:83:80:d7:9d:49:8e:45:73:21:b2:92:f2:16:f7:80:7b: 3c:00:ad:ee:24:2c:a2:c0:ad:59:b7:a7:9c:2f:72:f5:22:5f: 13:5a:e5:a4:eb:70:47:4b:f2:88:a1:06:4f:f7:4f:6b:e6:e3: b2:b4:80:24:df:4e:42:d3:b9:f4:fd:28:88:50:85:d1:53:80: 6c:17:f5:d9:54:1d:ad:65:9a:da:61:29:59:67:f3:a2:1f:6f: cc:dc:c5:65:7d:06:f6:96:49:02:bf:6a:b5:e0:ee:88:82:21: fd:a1:51:51:09:c1:f2:3f:f6:75:6e:d9:c1:77:f4:33:70:61: 0a:ba:d3:d0:ab:86:0b:84:36:f5:7b:f6:29:14:98:a7:9b:66: 8b:d4:67:09:2e:21:10:2f:4b:00:f8:ab:b3:fd:d2:56:2f:55: 68:43:07:dd:43:0f:dd:30:e1:87:f0:dd:90:c4:33:3b:ef:cd: 41:43:a9:43:ea:e6:33:d8:d3:cd:38:74:55:79:70:b4:d9:e8: 13:a9:35:63:ee:88:c1:41:d2:91:44:e9:86:fe:da:df:f9:74: ee:c6:6a:11:48:2c:07:b5:56:16:d2:15:b9:15:73:18:d1:e1: 5a:73:45:08 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUEsB80qLn2GpO+tC7bTt5pn7f+wQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjIyMDIwMjFaFw0yNjA0MjEyMDI1MjFaMDMxMTAvBgNV BAMTKDJGMUUxMzY1MEQ3QjgwNDNDMjQzNjY4MDA5NEZGNzI0NDYwQTVENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRg/UhwWnlp15Novq/ZNLBtoOP /nJ5/S8Xmzirhqi5aRYJfS1BwucijjVPdlL/9v0Ud3T2ijTXb/G7alzxEFr78jrp EiC0SdKd3nOCphRHEHzn7YgKnqbDPGB6kkNDdg3UilV4i0cJ6ZcCkpxj8cupEwKk 2zl4/3lJ6wlCpRzw1nM/aNkV72VNqpWZK8MuVKSMK2zjedtnHS7msVGi4tAcM/a+ GXH9UH6Em+gq2K3FKvCwaVjcWWy7EDNGpcL/5W8YNoAziqeOKfgYqQ2rvSIBAZNb Um3lTYhb5isQBiit0yLcv1Jdw8vwWMVNWp9QPi0Z+KnM8/L+qDI2mtKApqbtAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvHhNlDXuAQ8JD ZoAJT/ckRgpdTDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUd4 M05iUWM2TXBKV3BBZFR6MUQ5SHo4NUtGUGVFbmRvN2JZdkRyeUNRTHUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FH eDNOYlFjNk1wSldwQWRUejFEOUh6ODVLRlBlRW5kbzdiWXZEcnlDUUx1LzAvMkYx RTEzNjUwRDdCODA0M0MyNDM2NjgwMDk0RkY3MjQ0NjBBNUQ0Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEuzFwMA0EAgACMAcDBQAoBAEMMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm3wMA0GCSqGSIb3DQEBCwUAA4IBAQDKJFi27833zJw1WLhG if1VALsuB4OA151JjkVzIbKS8hb3gHs8AK3uJCyiwK1Zt6ecL3L1Il8TWuWk63BH S/KIoQZP909r5uOytIAk305C07n0/SiIUIXRU4BsF/XZVB2tZZraYSlZZ/OiH2/M 3MVlfQb2lkkCv2q14O6IgiH9oVFRCcHyP/Z1btnBd/QzcGEKutPQq4YLhDb1e/Yp FJinm2aL1GcJLiEQL0sA+Kuz/dJWL1VoQwfdQw/dMOGH8N2QxDM7781BQ6lD6uYz 2NPNOHRVeXC02egTqTVj7ojBQdKRROmG/trf+XTuxmoRSCwHtVYW0hW5FXMY0eFa c0UI -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:13 2025 by rpki-client on console.sobornost.net